0

I am working with C++ processes on a linux (CentOS 8) environment. These processes should be able to access an encrypted file on the system.

Where should I store the password for this encrypted file?

My only idea is to hardcode it into the C++ source code, but I doubt this solution is secure.

Improve this question
8
  • Why store it at all? You could open the file and it’s decryption wrapper at startup after user input. Than drop privileges so you can’t modify it anymore for that run. And yes hardcoded is insecure.
    – LvB
    Commented Jul 8, 2021 at 8:55
  • User input is not possible in my case unfortunately.
    – Sylvester
    Commented Jul 8, 2021 at 8:58
  • Why is the file encrypted in the first place? What are you protecting against? Are you protecting against the user getting the key, the user decrypting the file, an attacker getting the key, an attacker decrypting the file or an attacker modifying the file?
    – Gamer2015
    Commented Jul 8, 2021 at 9:05
  • How is the file encrypted? You can't actually encrypt (meaningfully) with a password - even "password-based encryption" just runs the password through a key-derivation function and then uses standard keyed encryption internally - and the only reason to use a password at all is if the user needs to remember it. Also, are you trying to prevent the user from reading the file (don't bother, impossible) or are you trying to prevent other users from doing so, or what?
    – CBHacking
    Commented Jul 8, 2021 at 9:18
  • 1
    Related: security.stackexchange.com/questions/12332/…
    – mti2935
    Commented Jul 8, 2021 at 11:19

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .